This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: HiwaSJQ3mmCeFiYEPWVSDGH08HV7hbp2j84DuuTup74= Subject key identifier: 87:A0:50:1A:4B:06:B7:E0:CE:21:4F:E1:9B:A0:97:E6:AF:84:7E:91 Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 6FE32C7E377343846E2A5FC9B82E0242EAECE5E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 0215 Signing time: Mon 01 Dec 2025 19:41:22 +0000 Manifest this update: Mon 01 Dec 2025 19:36:22 +0000 Manifest next update: Fri 05 Dec 2025 04:21:22 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: s0qvfvB2gnxmfUAxwP13NlGDjfRBIN12LYQPxL63CC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e3:2c:7e:37:73:43:84:6e:2a:5f:c9:b8:2e:02:42:ea:ec:e5:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: Dec 1 19:36:22 2025 GMT Not After : Dec 5 04:21:22 2025 GMT Subject: CN=87A0501A4B06B7E0CE214FE19BA097E6AF847E91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6e:37:90:e6:b9:43:9e:1f:2d:9a:88:50:51: 0b:8e:71:25:6d:56:d6:b1:40:eb:28:6e:58:62:f5: 25:3f:ef:4d:b4:9c:28:53:3b:8e:90:10:9a:fb:39: 25:c9:dc:b5:da:71:92:d9:13:b7:e3:19:31:77:2c: 87:93:15:b2:7a:bb:f4:4f:77:10:cd:f5:24:ec:39: f8:c4:9b:7a:7d:5d:b1:23:c6:7c:be:e5:06:90:e5: 69:eb:ef:57:2e:35:39:1a:ad:00:93:90:1c:58:e0: 12:64:c7:c4:8f:23:5f:bf:82:a1:96:f2:6d:70:d3: 7e:e8:30:23:e8:9f:30:a5:57:4c:f8:62:4c:84:6e: b5:58:b2:8e:32:49:e9:5a:b4:cc:68:15:72:41:59: 2f:9b:53:df:5b:d0:7b:08:f7:e6:23:57:46:92:79: 45:e3:5f:1f:77:5d:55:6e:e0:32:56:07:54:9e:fd: 8a:07:f3:a4:b1:a4:9c:7f:22:20:ab:28:fa:1d:c1: d7:e4:ad:81:db:26:43:d7:3c:39:a0:b1:e1:b9:01: 4c:b5:44:b0:20:ce:ec:4e:cd:c6:64:42:d8:d3:57: f6:85:b4:ac:74:5a:ec:a5:88:48:a3:ca:c3:28:e4: c3:74:08:ea:9d:fc:f4:cf:d3:3b:de:5e:92:e7:6e: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A0:50:1A:4B:06:B7:E0:CE:21:4F:E1:9B:A0:97:E6:AF:84:7E:91 X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:69:43:0b:1f:08:a8:60:71:ff:78:46:24:26:63:97:f4:24: 07:5d:47:7d:19:cd:f6:06:e9:3a:d1:be:24:c3:46:86:ba:24: e8:70:03:00:8b:b2:76:b8:3d:bf:b9:b8:8a:08:a6:e5:80:ee: c7:60:fe:2f:2d:cc:e4:ae:3f:e9:ce:b8:80:31:1e:8b:95:09: 42:2e:ae:b9:9d:a0:9a:84:0f:53:53:a2:85:31:b2:a8:3e:3b: e9:2c:5a:d0:41:cf:5f:b1:8a:0c:f8:3c:e5:e9:26:de:5a:ed: 0a:a6:b8:6d:79:55:c6:cf:f2:e8:b5:c8:ca:0f:09:f9:88:d2: a2:ad:fd:e8:b7:1a:af:12:ac:0e:83:66:cb:f1:32:d8:28:df: 03:53:a7:f5:89:ad:10:80:30:63:54:6b:2f:d8:8c:21:9d:2b: 84:f7:7b:22:b0:41:a4:b2:8c:ed:a5:26:69:01:93:5f:1a:6a: 73:b4:82:e8:f1:5c:8c:46:15:19:73:f8:7f:bc:c9:97:c6:16: 56:71:fe:12:1f:63:ad:97:bf:17:d9:40:24:4c:72:44:75:51: 9c:7e:c8:da:31:e8:2d:b9:ce:93:a5:ba:f2:9f:33:01:51:b8: 0f:7a:55:a3:96:d8:1c:14:22:7f:92:a6:bd:ea:35:ff:31:1e: 53:a6:88:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb+MsfjdzQ4RuKl/JuC4CQurs5eUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNTEyMDExOTM2MjJaFw0yNTEyMDUwNDIxMjJaMDMxMTAvBgNV BAMTKDg3QTA1MDFBNEIwNkI3RTBDRTIxNEZFMTlCQTA5N0U2QUY4NDdFOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbjeQ5rlDnh8tmohQUQuOcSVt VtaxQOsoblhi9SU/7020nChTO46QEJr7OSXJ3LXacZLZE7fjGTF3LIeTFbJ6u/RP dxDN9STsOfjEm3p9XbEjxny+5QaQ5Wnr71cuNTkarQCTkBxY4BJkx8SPI1+/gqGW 8m1w037oMCPonzClV0z4YkyEbrVYso4ySelatMxoFXJBWS+bU99b0HsI9+YjV0aS eUXjXx93XVVu4DJWB1Se/YoH86SxpJx/IiCrKPodwdfkrYHbJkPXPDmgseG5AUy1 RLAgzuxOzcZkQtjTV/aFtKx0WuyliEijysMo5MN0COqd/PTP0zveXpLnbrDZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh6BQGksGt+DOIU/hm6CX5q+EfpEwHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtpQwsfCKhgcf94RiQmY5f0JAddR30ZzfYG 6TrRviTDRoa6JOhwAwCLsna4Pb+5uIoIpuWA7sdg/i8tzOSuP+nOuIAxHouVCUIu rrmdoJqED1NTooUxsqg+O+ksWtBBz1+xigz4POXpJt5a7QqmuG15VcbP8ui1yMoP CfmI0qKt/ei3Gq8SrA6DZsvxMtgo3wNTp/WJrRCAMGNUay/YjCGdK4T3eyKwQaSy jO2lJmkBk18aanO0gujxXIxGFRlz+H+8yZfGFlZx/hIfY62XvxfZQCRMckR1UZx+ yNox6C25zpOluvKfMwFRuA96VaOW2BwUIn+Spr3qNf8xHlOmiLU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:34 2025 by rpki-client